Please allow me to introduce you another open-source project called AD Import Service. A tool that keeps your Kentico users and roles in sync with Active Directory. It's a lightweight but very powerful alternative to AD Import Utility.